@spinabot/brigade 0.1.2 → 1.0.1

package/dist/agents/extensions/discovery.d.ts

@@ -0,0 +1,84 @@
+/**
+ * User-module discovery.
+ *
+ * Out-of-tree modules dropped into `~/.brigade/extensions/` are discovered and
+ * dynamic-imported here, alongside the bundled ones. A candidate is either a
+ * top-level `*.js`/`*.mjs` file or a folder containing `index.js`/`index.mjs`.
+ * Each must `export default` a `BrigadeModule` (or an array of them); anything
+ * else is skipped with a warning — a bad user module never aborts boot.
+ *
+ * Authors import the stable `@brigade/extension-sdk` surface (defineModule + the
+ * capability contracts), so a user module never reaches into Brigade internals.
+ *
+ * POSIX safety gates (non-Windows only): world-writable files are rejected
+ * (mode & 0o002), suspicious ownership (uid != current uid AND != root) is
+ * rejected, and a `realpath` escape from `extensionsDir` (via symlink) is
+ * rejected. Each rejection logs WHY and skips the candidate; the loader
+ * continues with the rest.
+ */
+import type { BrigadeModule, BrigadeModuleManifest } from "./types.js";
+/** A discovered module plus where it came from (for conflict reporting + reload). */
+export interface DiscoveredModule {
+    module: BrigadeModule;
+    /**
+     * Where the module came from. Today discovery only walks the user dir
+     * (`~/.brigade/extensions/`), so the value is always `"user"` from here;
+     * the loader tags bundled-in-tree modules with `"bundled"` when it
+     * merges them. The field is fixed at the discovery layer so downstream
+     * tracing (activation logs, conflict reports) always has provenance.
+     */
+    origin: "user" | "bundled";
+    /** Absolute path the module was imported from. */
+    source: string;
+    /**
+     * Module manifest, when the module exported one. Surfaces capability
+     * metadata WITHOUT requiring the module's `register` to run; informational
+     * today, consumed by the future discovery planner.
+     */
+    manifest?: BrigadeModuleManifest;
+}
+/**
+ * POSIX safety gate. Returns `null` when the candidate passes; otherwise a
+ * short reason string that the caller logs + uses to skip the candidate.
+ *
+ * Skipped entirely on Windows (`process.platform === "win32"`) — the POSIX
+ * mode/uid bits don't carry meaning there. Brigade ships to Windows, so this
+ * gate must never break that platform.
+ *
+ * Three checks (all non-Windows):
+ *   1. world-writable bit (`mode & 0o002`) — anyone could drop code in.
+ *   2. ownership: file owned by someone other than the current user AND not
+ *      root. Avoids loading code planted by a different unprivileged account.
+ *   3. realpath escape: `realpath(candidate)` must stay under
+ *      `realpath(extensionsDir)`. A symlink that points outside the dir
+ *      (e.g. → `/etc/something.js`) is rejected.
+ *
+ * `platformOverride` is a test seam — callers normally omit it.
+ */
+export declare function checkPosixSafety(candidate: string, extensionsDir: string, platformOverride?: NodeJS.Platform): string | null;
+/**
+ * Public lister — returns the candidate sources under `extensionsDir` with
+ * each one's safety verdict, WITHOUT importing them. Useful for diagnostic
+ * surfaces (`brigade doctor`, the storage layer's listSources) that need
+ * to know what *would* load and whether the file passes the safety gate.
+ *
+ * Each entry's `safetyReason` is `null` when the candidate passed the
+ * POSIX safety gate; a non-null string surfaces the rejection reason.
+ */
+export declare function listExtensionSources(extensionsDir: string): ReadonlyArray<{
+    source: string;
+    kind: "file" | "dir-index";
+    safetyReason: string | null;
+}>;
+/** Does the extensions dir exist? Plain `fs.existsSync` lift so callers don't
+ *  need to re-derive the path. */
+export declare function extensionsRootExists(extensionsDir: string): boolean;
+/** Drop the discovery cache so the next `discoverUserModules` re-scans (reload). */
+export declare function clearDiscoveryCache(): void;
+/**
+ * Discover + import user modules from `extensionsDir`. Returns the loaded
+ * modules (shape-validated). Errors per candidate are logged and skipped.
+ * Cached per dir for the process lifetime (see `clearDiscoveryCache`).
+ */
+export declare function discoverUserModules(extensionsDir: string): Promise<DiscoveredModule[]>;
+//# sourceMappingURL=discovery.d.ts.map

package/dist/agents/extensions/discovery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.d.ts","sourceRoot":"","sources":["../../../src/agents/extensions/discovery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAOH,OAAO,KAAK,EAAE,aAAa,EAAE,qBAAqB,EAAE,MAAM,YAAY,CAAC;AAmBvE,qFAAqF;AACrF,MAAM,WAAW,gBAAgB;IAChC,MAAM,EAAE,aAAa,CAAC;IACtB;;;;;;OAMG;IACH,MAAM,EAAE,MAAM,GAAG,SAAS,CAAC;IAC3B,kDAAkD;IAClD,MAAM,EAAE,MAAM,CAAC;IACf;;;;OAIG;IACH,QAAQ,CAAC,EAAE,qBAAqB,CAAC;CACjC;AA8BD;;;;;;;;;;;;;;;;;GAiBG;AACH,wBAAgB,gBAAgB,CAC/B,SAAS,EAAE,MAAM,EACjB,aAAa,EAAE,MAAM,EACrB,gBAAgB,CAAC,EAAE,MAAM,CAAC,QAAQ,GAChC,MAAM,GAAG,IAAI,CAqCf;AAoCD;;;;;;;;GAQG;AACH,wBAAgB,oBAAoB,CACnC,aAAa,EAAE,MAAM,GACnB,aAAa,CAAC;IAAE,MAAM,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,MAAM,GAAG,WAAW,CAAC;IAAC,YAAY,EAAE,MAAM,GAAG,IAAI,CAAA;CAAE,CAAC,CAmB5F;AAED;kCACkC;AAClC,wBAAgB,oBAAoB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAEnE;AAED,oFAAoF;AACpF,wBAAgB,mBAAmB,IAAI,IAAI,CAE1C;AAED;;;;GAIG;AACH,wBAAsB,mBAAmB,CAAC,aAAa,EAAE,MAAM,GAAG,OAAO,CAAC,gBAAgB,EAAE,CAAC,CAmD5F"}

package/dist/agents/extensions/discovery.js

@@ -0,0 +1,249 @@
+/**
+ * User-module discovery.
+ *
+ * Out-of-tree modules dropped into `~/.brigade/extensions/` are discovered and
+ * dynamic-imported here, alongside the bundled ones. A candidate is either a
+ * top-level `*.js`/`*.mjs` file or a folder containing `index.js`/`index.mjs`.
+ * Each must `export default` a `BrigadeModule` (or an array of them); anything
+ * else is skipped with a warning — a bad user module never aborts boot.
+ *
+ * Authors import the stable `@brigade/extension-sdk` surface (defineModule + the
+ * capability contracts), so a user module never reaches into Brigade internals.
+ *
+ * POSIX safety gates (non-Windows only): world-writable files are rejected
+ * (mode & 0o002), suspicious ownership (uid != current uid AND != root) is
+ * rejected, and a `realpath` escape from `extensionsDir` (via symlink) is
+ * rejected. Each rejection logs WHY and skips the candidate; the loader
+ * continues with the rest.
+ */
+import { existsSync, readdirSync, realpathSync, statSync } from "node:fs";
+import path from "node:path";
+import { pathToFileURL } from "node:url";
+import { createSubsystemLogger } from "../../logging/subsystem-logger.js";
+const log = createSubsystemLogger("extensions/discovery");
+// A user module whose top-level module init hangs (e.g. a stray top-level
+// `await`) must not wedge a turn or boot. Cap each import; a slow one is
+// logged + skipped (the import keeps running detached but we move on).
+const IMPORT_TIMEOUT_MS = 5_000;
+function importWithTimeout(href) {
+    return Promise.race([
+        import(href),
+        new Promise((_, reject) => {
+            const t = setTimeout(() => reject(new Error(`import timed out after ${IMPORT_TIMEOUT_MS}ms`)), IMPORT_TIMEOUT_MS);
+            t.unref?.();
+        }),
+    ]);
+}
+/** Duck-type check: a value is a usable BrigadeModule. */
+function isModule(value) {
+    return (!!value &&
+        typeof value === "object" &&
+        typeof value.id === "string" &&
+        typeof value.register === "function");
+}
+/** Duck-type check for a BrigadeModuleManifest carried on a module export. */
+function isManifest(value) {
+    return !!value && typeof value === "object" && typeof value.id === "string";
+}
+/** Resolve the import entry for a directory candidate (index.js / index.mjs). */
+function dirEntry(dir) {
+    for (const name of ["index.js", "index.mjs"]) {
+        const candidate = path.join(dir, name);
+        try {
+            if (statSync(candidate).isFile())
+                return candidate;
+        }
+        catch {
+            /* not present */
+        }
+    }
+    return null;
+}
+/**
+ * POSIX safety gate. Returns `null` when the candidate passes; otherwise a
+ * short reason string that the caller logs + uses to skip the candidate.
+ *
+ * Skipped entirely on Windows (`process.platform === "win32"`) — the POSIX
+ * mode/uid bits don't carry meaning there. Brigade ships to Windows, so this
+ * gate must never break that platform.
+ *
+ * Three checks (all non-Windows):
+ *   1. world-writable bit (`mode & 0o002`) — anyone could drop code in.
+ *   2. ownership: file owned by someone other than the current user AND not
+ *      root. Avoids loading code planted by a different unprivileged account.
+ *   3. realpath escape: `realpath(candidate)` must stay under
+ *      `realpath(extensionsDir)`. A symlink that points outside the dir
+ *      (e.g. → `/etc/something.js`) is rejected.
+ *
+ * `platformOverride` is a test seam — callers normally omit it.
+ */
+export function checkPosixSafety(candidate, extensionsDir, platformOverride) {
+    const platform = platformOverride ?? process.platform;
+    if (platform === "win32")
+        return null;
+    let st;
+    try {
+        st = statSync(candidate);
+    }
+    catch (err) {
+        return `stat failed: ${err instanceof Error ? err.message : String(err)}`;
+    }
+    // (1) world-writable bit — anyone could drop code in.
+    if ((st.mode & 0o002) !== 0) {
+        return `world-writable (mode=${(st.mode & 0o777).toString(8)})`;
+    }
+    // (2) ownership — file owned by someone other than the current uid AND
+    // not root. We can't enforce this in environments where getuid is not
+    // available (Windows: handled above; non-POSIX runtimes: skip).
+    const currentUid = typeof process.getuid === "function" ? process.getuid() : undefined;
+    if (currentUid !== undefined && st.uid !== currentUid && st.uid !== 0) {
+        return `suspicious ownership (uid=${st.uid}, currentUid=${currentUid})`;
+    }
+    // (3) realpath escape — symlinks must not point outside extensionsDir.
+    try {
+        const realCandidate = realpathSync(candidate);
+        const realExtDir = realpathSync(extensionsDir);
+        const rel = path.relative(realExtDir, realCandidate);
+        if (rel.startsWith("..") || path.isAbsolute(rel)) {
+            return `symlink escape (resolves to ${realCandidate}, outside ${realExtDir})`;
+        }
+    }
+    catch (err) {
+        return `realpath failed: ${err instanceof Error ? err.message : String(err)}`;
+    }
+    return null;
+}
+/** List candidate entry files under the extensions dir (files + folder index entries). */
+function candidateEntries(extensionsDir) {
+    let names;
+    try {
+        names = readdirSync(extensionsDir);
+    }
+    catch {
+        return []; // dir absent — nothing to discover (the common case)
+    }
+    const entries = [];
+    for (const name of names) {
+        if (name.startsWith("."))
+            continue; // dotfiles / hidden
+        const full = path.join(extensionsDir, name);
+        let st;
+        try {
+            st = statSync(full);
+        }
+        catch {
+            continue;
+        }
+        if (st.isFile() && (name.endsWith(".js") || name.endsWith(".mjs"))) {
+            entries.push(full);
+        }
+        else if (st.isDirectory()) {
+            const entry = dirEntry(full);
+            if (entry)
+                entries.push(entry);
+        }
+    }
+    return entries;
+}
+// Process-lifetime cache keyed by dir. The per-turn agent path and the gateway
+// both call discovery; without this they'd readdir+stat (and re-run the import
+// resolution) on every turn. Node already caches the dynamic imports themselves;
+// this avoids the filesystem walk. Cleared by `clearDiscoveryCache()` on reload.
+const discoveryCache = new Map();
+/**
+ * Public lister — returns the candidate sources under `extensionsDir` with
+ * each one's safety verdict, WITHOUT importing them. Useful for diagnostic
+ * surfaces (`brigade doctor`, the storage layer's listSources) that need
+ * to know what *would* load and whether the file passes the safety gate.
+ *
+ * Each entry's `safetyReason` is `null` when the candidate passed the
+ * POSIX safety gate; a non-null string surfaces the rejection reason.
+ */
+export function listExtensionSources(extensionsDir) {
+    const out = [];
+    for (const source of candidateEntries(extensionsDir)) {
+        const safetyReason = checkPosixSafety(source, extensionsDir);
+        // `candidateEntries` returns the absolute path; for dir-style entries
+        // that path points at the chosen `dirEntry` (the dir's resolved entry
+        // file, e.g. `<dir>/index.js`). The shape lets the caller surface
+        // "module folder X resolved to file Y" diagnostics without us baking
+        // in the formatting.
+        let kind = "file";
+        try {
+            const st = statSync(source);
+            if (st.isDirectory())
+                kind = "dir-index";
+        }
+        catch {
+            // Already-stat'd by candidateEntries; if it's gone now treat as file.
+        }
+        out.push({ source, kind, safetyReason });
+    }
+    return out;
+}
+/** Does the extensions dir exist? Plain `fs.existsSync` lift so callers don't
+ *  need to re-derive the path. */
+export function extensionsRootExists(extensionsDir) {
+    return existsSync(extensionsDir);
+}
+/** Drop the discovery cache so the next `discoverUserModules` re-scans (reload). */
+export function clearDiscoveryCache() {
+    discoveryCache.clear();
+}
+/**
+ * Discover + import user modules from `extensionsDir`. Returns the loaded
+ * modules (shape-validated). Errors per candidate are logged and skipped.
+ * Cached per dir for the process lifetime (see `clearDiscoveryCache`).
+ */
+export async function discoverUserModules(extensionsDir) {
+    const cached = discoveryCache.get(extensionsDir);
+    if (cached)
+        return cached;
+    // Do NOT cache the absent-dir case — otherwise a user who creates the dir +
+    // drops a module AFTER boot stays invisible until a reload. Re-checking an
+    // absent dir each turn is one cheap stat. Once the dir exists we cache.
+    if (!existsSync(extensionsDir))
+        return [];
+    const out = [];
+    for (const source of candidateEntries(extensionsDir)) {
+        // POSIX safety gate — runs BEFORE the import so a malicious world-
+        // writable or symlink-escape candidate never executes its top-level.
+        const safetyReason = checkPosixSafety(source, extensionsDir);
+        if (safetyReason) {
+            log.warn("rejected user extension — POSIX safety check failed", {
+                source,
+                reason: safetyReason,
+            });
+            continue;
+        }
+        try {
+            const imported = (await importWithTimeout(pathToFileURL(source).href));
+            const exported = imported.default ?? imported.module;
+            const candidates = Array.isArray(exported) ? exported : [exported];
+            // A module may carry `manifest` either as a top-level named export OR
+            // as a field on the module object itself. Prefer the top-level form
+            // (matches the documented authoring shape); fall back to the module
+            // field for compactness.
+            const topLevelManifest = isManifest(imported.manifest) ? imported.manifest : undefined;
+            for (const c of candidates) {
+                if (isModule(c)) {
+                    const manifest = topLevelManifest ??
+                        (isManifest(c.manifest) ? c.manifest : undefined);
+                    out.push({ module: c, origin: "user", source, manifest });
+                }
+                else {
+                    log.warn("ignored user extension — no default BrigadeModule export", { source });
+                }
+            }
+        }
+        catch (err) {
+            log.warn("failed to import user extension — skipping", {
+                source,
+                error: err instanceof Error ? err.message : String(err),
+            });
+        }
+    }
+    discoveryCache.set(extensionsDir, out);
+    return out;
+}
+//# sourceMappingURL=discovery.js.map

package/dist/agents/extensions/discovery.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discovery.js","sourceRoot":"","sources":["../../../src/agents/extensions/discovery.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;GAiBG;AAEH,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,YAAY,EAAE,QAAQ,EAAE,MAAM,SAAS,CAAC;AAC1E,OAAO,IAAI,MAAM,WAAW,CAAC;AAC7B,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AAEzC,OAAO,EAAE,qBAAqB,EAAE,MAAM,mCAAmC,CAAC;AAG1E,MAAM,GAAG,GAAG,qBAAqB,CAAC,sBAAsB,CAAC,CAAC;AAE1D,0EAA0E;AAC1E,yEAAyE;AACzE,uEAAuE;AACvE,MAAM,iBAAiB,GAAG,KAAK,CAAC;AAEhC,SAAS,iBAAiB,CAAC,IAAY;IACtC,OAAO,OAAO,CAAC,IAAI,CAAC;QACnB,MAAM,CAAC,IAAI,CAAC;QACZ,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,EAAE;YACzB,MAAM,CAAC,GAAG,UAAU,CAAC,GAAG,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,CAAC,0BAA0B,iBAAiB,IAAI,CAAC,CAAC,EAAE,iBAAiB,CAAC,CAAC;YAClH,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC;QACb,CAAC,CAAC;KACF,CAAC,CAAC;AACJ,CAAC;AAuBD,0DAA0D;AAC1D,SAAS,QAAQ,CAAC,KAAc;IAC/B,OAAO,CACN,CAAC,CAAC,KAAK;QACP,OAAO,KAAK,KAAK,QAAQ;QACzB,OAAQ,KAAuB,CAAC,EAAE,KAAK,QAAQ;QAC/C,OAAQ,KAAuB,CAAC,QAAQ,KAAK,UAAU,CACvD,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,SAAS,UAAU,CAAC,KAAc;IACjC,OAAO,CAAC,CAAC,KAAK,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,OAAQ,KAA+B,CAAC,EAAE,KAAK,QAAQ,CAAC;AACxG,CAAC;AAED,iFAAiF;AACjF,SAAS,QAAQ,CAAC,GAAW;IAC5B,KAAK,MAAM,IAAI,IAAI,CAAC,UAAU,EAAE,WAAW,CAAC,EAAE,CAAC;QAC9C,MAAM,SAAS,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC;QACvC,IAAI,CAAC;YACJ,IAAI,QAAQ,CAAC,SAAS,CAAC,CAAC,MAAM,EAAE;gBAAE,OAAO,SAAS,CAAC;QACpD,CAAC;QAAC,MAAM,CAAC;YACR,iBAAiB;QAClB,CAAC;IACF,CAAC;IACD,OAAO,IAAI,CAAC;AACb,CAAC;AAED;;;;;;;;;;;;;;;;;GAiBG;AACH,MAAM,UAAU,gBAAgB,CAC/B,SAAiB,EACjB,aAAqB,EACrB,gBAAkC;IAElC,MAAM,QAAQ,GAAG,gBAAgB,IAAI,OAAO,CAAC,QAAQ,CAAC;IACtD,IAAI,QAAQ,KAAK,OAAO;QAAE,OAAO,IAAI,CAAC;IAEtC,IAAI,EAA+B,CAAC;IACpC,IAAI,CAAC;QACJ,EAAE,GAAG,QAAQ,CAAC,SAAS,CAAC,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,OAAO,gBAAgB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IAC3E,CAAC;IAED,sDAAsD;IACtD,IAAI,CAAC,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC,KAAK,CAAC,EAAE,CAAC;QAC7B,OAAO,wBAAwB,CAAC,EAAE,CAAC,IAAI,GAAG,KAAK,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,GAAG,CAAC;IACjE,CAAC;IAED,uEAAuE;IACvE,sEAAsE;IACtE,gEAAgE;IAChE,MAAM,UAAU,GAAG,OAAO,OAAO,CAAC,MAAM,KAAK,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;IACvF,IAAI,UAAU,KAAK,SAAS,IAAI,EAAE,CAAC,GAAG,KAAK,UAAU,IAAI,EAAE,CAAC,GAAG,KAAK,CAAC,EAAE,CAAC;QACvE,OAAO,6BAA6B,EAAE,CAAC,GAAG,gBAAgB,UAAU,GAAG,CAAC;IACzE,CAAC;IAED,uEAAuE;IACvE,IAAI,CAAC;QACJ,MAAM,aAAa,GAAG,YAAY,CAAC,SAAS,CAAC,CAAC;QAC9C,MAAM,UAAU,GAAG,YAAY,CAAC,aAAa,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,IAAI,CAAC,QAAQ,CAAC,UAAU,EAAE,aAAa,CAAC,CAAC;QACrD,IAAI,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC,EAAE,CAAC;YAClD,OAAO,+BAA+B,aAAa,aAAa,UAAU,GAAG,CAAC;QAC/E,CAAC;IACF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,OAAO,oBAAoB,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC;IAC/E,CAAC;IAED,OAAO,IAAI,CAAC;AACb,CAAC;AAED,0FAA0F;AAC1F,SAAS,gBAAgB,CAAC,aAAqB;IAC9C,IAAI,KAAe,CAAC;IACpB,IAAI,CAAC;QACJ,KAAK,GAAG,WAAW,CAAC,aAAa,CAAC,CAAC;IACpC,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,EAAE,CAAC,CAAC,qDAAqD;IACjE,CAAC;IACD,MAAM,OAAO,GAAa,EAAE,CAAC;IAC7B,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,IAAI,IAAI,CAAC,UAAU,CAAC,GAAG,CAAC;YAAE,SAAS,CAAC,oBAAoB;QACxD,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;QAC5C,IAAI,EAA+B,CAAC;QACpC,IAAI,CAAC;YACJ,EAAE,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;QACrB,CAAC;QAAC,MAAM,CAAC;YACR,SAAS;QACV,CAAC;QACD,IAAI,EAAE,CAAC,MAAM,EAAE,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC;YACpE,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpB,CAAC;aAAM,IAAI,EAAE,CAAC,WAAW,EAAE,EAAE,CAAC;YAC7B,MAAM,KAAK,GAAG,QAAQ,CAAC,IAAI,CAAC,CAAC;YAC7B,IAAI,KAAK;gBAAE,OAAO,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAChC,CAAC;IACF,CAAC;IACD,OAAO,OAAO,CAAC;AAChB,CAAC;AAED,+EAA+E;AAC/E,+EAA+E;AAC/E,iFAAiF;AACjF,iFAAiF;AACjF,MAAM,cAAc,GAAG,IAAI,GAAG,EAA8B,CAAC;AAE7D;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CACnC,aAAqB;IAErB,MAAM,GAAG,GAAuF,EAAE,CAAC;IACnG,KAAK,MAAM,MAAM,IAAI,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC;QACtD,MAAM,YAAY,GAAG,gBAAgB,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QAC7D,sEAAsE;QACtE,sEAAsE;QACtE,kEAAkE;QAClE,qEAAqE;QACrE,qBAAqB;QACrB,IAAI,IAAI,GAAyB,MAAM,CAAC;QACxC,IAAI,CAAC;YACJ,MAAM,EAAE,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC5B,IAAI,EAAE,CAAC,WAAW,EAAE;gBAAE,IAAI,GAAG,WAAW,CAAC;QAC1C,CAAC;QAAC,MAAM,CAAC;YACR,sEAAsE;QACvE,CAAC;QACD,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;IAC1C,CAAC;IACD,OAAO,GAAG,CAAC;AACZ,CAAC;AAED;kCACkC;AAClC,MAAM,UAAU,oBAAoB,CAAC,aAAqB;IACzD,OAAO,UAAU,CAAC,aAAa,CAAC,CAAC;AAClC,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,mBAAmB;IAClC,cAAc,CAAC,KAAK,EAAE,CAAC;AACxB,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CAAC,aAAqB;IAC9D,MAAM,MAAM,GAAG,cAAc,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;IACjD,IAAI,MAAM;QAAE,OAAO,MAAM,CAAC;IAC1B,4EAA4E;IAC5E,2EAA2E;IAC3E,wEAAwE;IACxE,IAAI,CAAC,UAAU,CAAC,aAAa,CAAC;QAAE,OAAO,EAAE,CAAC;IAC1C,MAAM,GAAG,GAAuB,EAAE,CAAC;IACnC,KAAK,MAAM,MAAM,IAAI,gBAAgB,CAAC,aAAa,CAAC,EAAE,CAAC;QACtD,mEAAmE;QACnE,qEAAqE;QACrE,MAAM,YAAY,GAAG,gBAAgB,CAAC,MAAM,EAAE,aAAa,CAAC,CAAC;QAC7D,IAAI,YAAY,EAAE,CAAC;YAClB,GAAG,CAAC,IAAI,CAAC,qDAAqD,EAAE;gBAC/D,MAAM;gBACN,MAAM,EAAE,YAAY;aACpB,CAAC,CAAC;YACH,SAAS;QACV,CAAC;QACD,IAAI,CAAC;YACJ,MAAM,QAAQ,GAAG,CAAC,MAAM,iBAAiB,CAAC,aAAa,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,CAIpE,CAAC;YACF,MAAM,QAAQ,GAAG,QAAQ,CAAC,OAAO,IAAI,QAAQ,CAAC,MAAM,CAAC;YACrD,MAAM,UAAU,GAAG,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC;YACnE,sEAAsE;YACtE,oEAAoE;YACpE,oEAAoE;YACpE,yBAAyB;YACzB,MAAM,gBAAgB,GAAG,UAAU,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC;YACvF,KAAK,MAAM,CAAC,IAAI,UAAU,EAAE,CAAC;gBAC5B,IAAI,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;oBACjB,MAAM,QAAQ,GACb,gBAAgB;wBAChB,CAAC,UAAU,CAAE,CAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAE,CAAmB,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;oBACzF,GAAG,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC,CAAC;gBAC3D,CAAC;qBAAM,CAAC;oBACP,GAAG,CAAC,IAAI,CAAC,0DAA0D,EAAE,EAAE,MAAM,EAAE,CAAC,CAAC;gBAClF,CAAC;YACF,CAAC;QACF,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,GAAG,CAAC,IAAI,CAAC,4CAA4C,EAAE;gBACtD,MAAM;gBACN,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACvD,CAAC,CAAC;QACJ,CAAC;IACF,CAAC;IACD,cAAc,CAAC,GAAG,CAAC,aAAa,EAAE,GAAG,CAAC,CAAC;IACvC,OAAO,GAAG,CAAC;AACZ,CAAC"}

package/dist/agents/extensions/hook-runner.d.ts

@@ -0,0 +1,67 @@
+/**
+ * Brigade hook runner — the 4-pattern dispatcher behind `registry.fireHook(...)`.
+ *
+ * Pi's native `pi.on(event, handler)` fires handlers sequentially in registration
+ * order and discards their return values — fine for telemetry, useless for the
+ * shapes the rest of Brigade needs (modifying payloads, claiming an inbound,
+ * write-path mutators). This runner adds Brigade's own ordering + four explicit
+ * patterns on top, keyed by hook NAME (not by handler), so a handler authored
+ * once via `b.hook(...)` gets the right dispatch shape automatically:
+ *
+ *   - `"void"`     — every handler runs in parallel via Promise.all; errors are
+ *                    swallowed; no return value. Telemetry-only.
+ *                    (`turn_start`, `agent_end`, `message_sent`, …)
+ *   - `"modifying"`— sequential by priority; each handler may return
+ *                    `{ modifications, shouldStop }`. Modifications shallow-merge
+ *                    into the payload so downstream handlers see the patched
+ *                    view; `shouldStop: true` halts the chain after the merge.
+ *                    (`before_prompt_build`, `message_sending`, …)
+ *   - `"claiming"` — sequential; the first handler to return `{ handled: true }`
+ *                    wins and the rest are skipped. Returns `{ handled, by }` so
+ *                    the caller can log which handler took it. Used wherever ONE
+ *                    plugin must own the event (`inbound_claim`, `reply_dispatch`).
+ *   - `"sync"`     — sequential SYNCHRONOUS; if a handler returns a Promise the
+ *                    runner THROWS pointing to the handler index. For write-path
+ *                    mutators that MUST complete before the next operation runs
+ *                    (`tool_result_persist`, `before_message_write`).
+ *
+ * The runner is payload-agnostic: it never inspects the shape beyond merging
+ * `modifications`. Each consumer site decides what the payload contains.
+ */
+import type { HookExecutionPattern, HookRegistration, HookResult } from "./types.js";
+/** Brigade-native hook name registry. New events plug in here + HOOK_PATTERNS. */
+export type BrigadeHookName = "turn_start" | "turn_end" | "agent_start" | "agent_end" | "before_prompt_build" | "before_model_resolve" | "inbound_claim" | "before_dispatch" | "reply_dispatch" | "before_agent_reply" | "message_received" | "message_sending" | "message_sent" | "tool_result_persist" | "before_message_write" | "subagent_spawning" | "subagent_spawned" | "subagent_ended" | "before_install";
+/** Dispatch pattern for every Brigade-native hook. */
+export declare const HOOK_PATTERNS: Record<BrigadeHookName, HookExecutionPattern>;
+/**
+ * Result of a `fire(...)` dispatch. Always carries a `handlerCount` (how many
+ * handlers MATCHED this event — useful for logs / dead-event detection) plus the
+ * pattern-specific outcome:
+ *   - void   → just `{ handlerCount }`
+ *   - modify → final `{ modifications }` (the merged payload patch)
+ *   - claim  → `{ handled, by? }`
+ *   - sync   → just `{ handlerCount }`
+ */
+export interface HookFireResult extends HookResult {
+    handlerCount: number;
+    /** Handler index (0-based, post-sort) that claimed the event — claiming pattern only. */
+    by?: number;
+}
+/** A handler entry the runner accepts. `id` is optional (for `by` reporting). */
+export interface RunnerHandlerEntry {
+    handler: (payload: unknown) => unknown;
+    priority?: number;
+    id?: string | number;
+}
+/**
+ * Build a runner over a fixed handler set. The set is sorted once (higher
+ * priority first; ties keep insertion order) so repeated `fire(...)` calls
+ * don't re-sort. Callers that mutate the underlying set should build a new
+ * runner.
+ */
+export declare function createHookRunner(handlers: ReadonlyArray<RunnerHandlerEntry>): {
+    fire: (name: BrigadeHookName, payload: unknown) => Promise<HookFireResult>;
+};
+/** Build a runner from the registry's recorded `HookRegistration[]` shape. */
+export declare function runnerFromRegistrations(regs: ReadonlyArray<HookRegistration>): ReturnType<typeof createHookRunner>;
+//# sourceMappingURL=hook-runner.d.ts.map

package/dist/agents/extensions/hook-runner.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-runner.d.ts","sourceRoot":"","sources":["../../../src/agents/extensions/hook-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,KAAK,EAAE,oBAAoB,EAAE,gBAAgB,EAAE,UAAU,EAAE,MAAM,YAAY,CAAC;AAErF,kFAAkF;AAClF,MAAM,MAAM,eAAe,GACxB,YAAY,GACZ,UAAU,GACV,aAAa,GACb,WAAW,GACX,qBAAqB,GACrB,sBAAsB,GACtB,eAAe,GACf,iBAAiB,GACjB,gBAAgB,GAChB,oBAAoB,GACpB,kBAAkB,GAClB,iBAAiB,GACjB,cAAc,GACd,qBAAqB,GACrB,sBAAsB,GACtB,mBAAmB,GACnB,kBAAkB,GAClB,gBAAgB,GAChB,gBAAgB,CAAC;AAEpB,sDAAsD;AACtD,eAAO,MAAM,aAAa,EAAE,MAAM,CAAC,eAAe,EAAE,oBAAoB,CAoBvE,CAAC;AAEF;;;;;;;;GAQG;AACH,MAAM,WAAW,cAAe,SAAQ,UAAU;IACjD,YAAY,EAAE,MAAM,CAAC;IACrB,yFAAyF;IACzF,EAAE,CAAC,EAAE,MAAM,CAAC;CACZ;AAED,iFAAiF;AACjF,MAAM,WAAW,kBAAkB;IAClC,OAAO,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC;IACvC,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,EAAE,CAAC,EAAE,MAAM,GAAG,MAAM,CAAC;CACrB;AAED;;;;;GAKG;AACH,wBAAgB,gBAAgB,CAAC,QAAQ,EAAE,aAAa,CAAC,kBAAkB,CAAC,GAAG;IAC9E,IAAI,EAAE,CAAC,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,cAAc,CAAC,CAAC;CAC3E,CA6FA;AAED,8EAA8E;AAC9E,wBAAgB,uBAAuB,CACtC,IAAI,EAAE,aAAa,CAAC,gBAAgB,CAAC,GACnC,UAAU,CAAC,OAAO,gBAAgB,CAAC,CAQrC"}

package/dist/agents/extensions/hook-runner.js

@@ -0,0 +1,155 @@
+/**
+ * Brigade hook runner — the 4-pattern dispatcher behind `registry.fireHook(...)`.
+ *
+ * Pi's native `pi.on(event, handler)` fires handlers sequentially in registration
+ * order and discards their return values — fine for telemetry, useless for the
+ * shapes the rest of Brigade needs (modifying payloads, claiming an inbound,
+ * write-path mutators). This runner adds Brigade's own ordering + four explicit
+ * patterns on top, keyed by hook NAME (not by handler), so a handler authored
+ * once via `b.hook(...)` gets the right dispatch shape automatically:
+ *
+ *   - `"void"`     — every handler runs in parallel via Promise.all; errors are
+ *                    swallowed; no return value. Telemetry-only.
+ *                    (`turn_start`, `agent_end`, `message_sent`, …)
+ *   - `"modifying"`— sequential by priority; each handler may return
+ *                    `{ modifications, shouldStop }`. Modifications shallow-merge
+ *                    into the payload so downstream handlers see the patched
+ *                    view; `shouldStop: true` halts the chain after the merge.
+ *                    (`before_prompt_build`, `message_sending`, …)
+ *   - `"claiming"` — sequential; the first handler to return `{ handled: true }`
+ *                    wins and the rest are skipped. Returns `{ handled, by }` so
+ *                    the caller can log which handler took it. Used wherever ONE
+ *                    plugin must own the event (`inbound_claim`, `reply_dispatch`).
+ *   - `"sync"`     — sequential SYNCHRONOUS; if a handler returns a Promise the
+ *                    runner THROWS pointing to the handler index. For write-path
+ *                    mutators that MUST complete before the next operation runs
+ *                    (`tool_result_persist`, `before_message_write`).
+ *
+ * The runner is payload-agnostic: it never inspects the shape beyond merging
+ * `modifications`. Each consumer site decides what the payload contains.
+ */
+/** Dispatch pattern for every Brigade-native hook. */
+export const HOOK_PATTERNS = {
+    turn_start: "void",
+    turn_end: "void",
+    agent_start: "void",
+    agent_end: "void",
+    before_prompt_build: "modifying",
+    before_model_resolve: "modifying",
+    inbound_claim: "claiming",
+    before_dispatch: "claiming",
+    reply_dispatch: "claiming",
+    before_agent_reply: "claiming",
+    message_received: "void",
+    message_sending: "modifying",
+    message_sent: "void",
+    tool_result_persist: "sync",
+    before_message_write: "sync",
+    subagent_spawning: "modifying",
+    subagent_spawned: "void",
+    subagent_ended: "void",
+    before_install: "modifying",
+};
+/**
+ * Build a runner over a fixed handler set. The set is sorted once (higher
+ * priority first; ties keep insertion order) so repeated `fire(...)` calls
+ * don't re-sort. Callers that mutate the underlying set should build a new
+ * runner.
+ */
+export function createHookRunner(handlers) {
+    // Stable sort: decorate with index so equal priorities keep registration order.
+    const sorted = handlers
+        .map((h, i) => ({ h, i }))
+        .sort((a, b) => (b.h.priority ?? 0) - (a.h.priority ?? 0) || a.i - b.i)
+        .map((x) => x.h);
+    return {
+        async fire(name, payload) {
+            const pattern = HOOK_PATTERNS[name];
+            if (!pattern) {
+                // Defensive: BrigadeHookName is a closed union so TS catches typos at
+                // compile time, but JS callers (or a future name added without a
+                // pattern entry) would land here. Treat as void so the call still
+                // completes, but surface a clear error to make the gap obvious.
+                throw new Error(`hook-runner: unknown hook name "${String(name)}" — add it to HOOK_PATTERNS`);
+            }
+            const count = sorted.length;
+            if (pattern === "void") {
+                // Parallel, errors swallowed — telemetry must never break the turn.
+                await Promise.all(sorted.map(async (h) => {
+                    try {
+                        await h.handler(payload);
+                    }
+                    catch {
+                        /* swallow */
+                    }
+                }));
+                return { handlerCount: count };
+            }
+            if (pattern === "modifying") {
+                let merged = {};
+                for (const h of sorted) {
+                    let res;
+                    try {
+                        res = (await h.handler(payload));
+                    }
+                    catch {
+                        // Modifying handlers that throw are skipped — same isolation as void;
+                        // a busted handler must not block the chain.
+                        continue;
+                    }
+                    if (res && typeof res === "object") {
+                        if (res.modifications && typeof res.modifications === "object") {
+                            merged = { ...merged, ...res.modifications };
+                            // Shallow-merge live into the payload so subsequent handlers see the patched view.
+                            if (payload && typeof payload === "object") {
+                                Object.assign(payload, res.modifications);
+                            }
+                        }
+                        if (res.shouldStop)
+                            break;
+                    }
+                }
+                return { handlerCount: count, modifications: merged };
+            }
+            if (pattern === "claiming") {
+                for (let i = 0; i < sorted.length; i++) {
+                    const h = sorted[i];
+                    let res;
+                    try {
+                        res = (await h.handler(payload));
+                    }
+                    catch {
+                        // A throwing claim handler does NOT claim — fall through to the next.
+                        continue;
+                    }
+                    if (res && res.handled === true) {
+                        return { handlerCount: count, handled: true, by: i };
+                    }
+                }
+                return { handlerCount: count, handled: false };
+            }
+            // pattern === "sync"
+            // Sequential synchronous. Returning a Promise from a sync handler is a
+            // programming error — these are write-path mutators that must complete
+            // before the next operation. Throw with the offending index so the
+            // author can find it.
+            for (let i = 0; i < sorted.length; i++) {
+                const h = sorted[i];
+                const out = h.handler(payload);
+                if (out && typeof out.then === "function") {
+                    throw new Error(`hook-runner: sync hook "${name}" handler at index ${i} returned a Promise — sync handlers must be synchronous`);
+                }
+            }
+            return { handlerCount: count };
+        },
+    };
+}
+/** Build a runner from the registry's recorded `HookRegistration[]` shape. */
+export function runnerFromRegistrations(regs) {
+    return createHookRunner(regs.map((r) => ({
+        handler: r.handler,
+        priority: r.priority,
+        id: r.event,
+    })));
+}
+//# sourceMappingURL=hook-runner.js.map

package/dist/agents/extensions/hook-runner.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"hook-runner.js","sourceRoot":"","sources":["../../../src/agents/extensions/hook-runner.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AA0BH,sDAAsD;AACtD,MAAM,CAAC,MAAM,aAAa,GAAkD;IAC3E,UAAU,EAAE,MAAM;IAClB,QAAQ,EAAE,MAAM;IAChB,WAAW,EAAE,MAAM;IACnB,SAAS,EAAE,MAAM;IACjB,mBAAmB,EAAE,WAAW;IAChC,oBAAoB,EAAE,WAAW;IACjC,aAAa,EAAE,UAAU;IACzB,eAAe,EAAE,UAAU;IAC3B,cAAc,EAAE,UAAU;IAC1B,kBAAkB,EAAE,UAAU;IAC9B,gBAAgB,EAAE,MAAM;IACxB,eAAe,EAAE,WAAW;IAC5B,YAAY,EAAE,MAAM;IACpB,mBAAmB,EAAE,MAAM;IAC3B,oBAAoB,EAAE,MAAM;IAC5B,iBAAiB,EAAE,WAAW;IAC9B,gBAAgB,EAAE,MAAM;IACxB,cAAc,EAAE,MAAM;IACtB,cAAc,EAAE,WAAW;CAC3B,CAAC;AAwBF;;;;;GAKG;AACH,MAAM,UAAU,gBAAgB,CAAC,QAA2C;IAG3E,gFAAgF;IAChF,MAAM,MAAM,GAAG,QAAQ;SACrB,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;SACzB,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,QAAQ,IAAI,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;SACtE,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC;IAElB,OAAO;QACN,KAAK,CAAC,IAAI,CAAC,IAAI,EAAE,OAAO;YACvB,MAAM,OAAO,GAAG,aAAa,CAAC,IAAI,CAAC,CAAC;YACpC,IAAI,CAAC,OAAO,EAAE,CAAC;gBACd,sEAAsE;gBACtE,iEAAiE;gBACjE,kEAAkE;gBAClE,gEAAgE;gBAChE,MAAM,IAAI,KAAK,CAAC,mCAAmC,MAAM,CAAC,IAAI,CAAC,6BAA6B,CAAC,CAAC;YAC/F,CAAC;YAED,MAAM,KAAK,GAAG,MAAM,CAAC,MAAM,CAAC;YAE5B,IAAI,OAAO,KAAK,MAAM,EAAE,CAAC;gBACxB,oEAAoE;gBACpE,MAAM,OAAO,CAAC,GAAG,CAChB,MAAM,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,EAAE,EAAE;oBACtB,IAAI,CAAC;wBACJ,MAAM,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;oBAC1B,CAAC;oBAAC,MAAM,CAAC;wBACR,aAAa;oBACd,CAAC;gBACF,CAAC,CAAC,CACF,CAAC;gBACF,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;YAChC,CAAC;YAED,IAAI,OAAO,KAAK,WAAW,EAAE,CAAC;gBAC7B,IAAI,MAAM,GAA4B,EAAE,CAAC;gBACzC,KAAK,MAAM,CAAC,IAAI,MAAM,EAAE,CAAC;oBACxB,IAAI,GAA2B,CAAC;oBAChC,IAAI,CAAC;wBACJ,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAA2B,CAAC;oBAC5D,CAAC;oBAAC,MAAM,CAAC;wBACR,sEAAsE;wBACtE,6CAA6C;wBAC7C,SAAS;oBACV,CAAC;oBACD,IAAI,GAAG,IAAI,OAAO,GAAG,KAAK,QAAQ,EAAE,CAAC;wBACpC,IAAI,GAAG,CAAC,aAAa,IAAI,OAAO,GAAG,CAAC,aAAa,KAAK,QAAQ,EAAE,CAAC;4BAChE,MAAM,GAAG,EAAE,GAAG,MAAM,EAAE,GAAG,GAAG,CAAC,aAAa,EAAE,CAAC;4BAC7C,mFAAmF;4BACnF,IAAI,OAAO,IAAI,OAAO,OAAO,KAAK,QAAQ,EAAE,CAAC;gCAC5C,MAAM,CAAC,MAAM,CAAC,OAAkC,EAAE,GAAG,CAAC,aAAa,CAAC,CAAC;4BACtE,CAAC;wBACF,CAAC;wBACD,IAAI,GAAG,CAAC,UAAU;4BAAE,MAAM;oBAC3B,CAAC;gBACF,CAAC;gBACD,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,aAAa,EAAE,MAAM,EAAE,CAAC;YACvD,CAAC;YAED,IAAI,OAAO,KAAK,UAAU,EAAE,CAAC;gBAC5B,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;oBACxC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;oBACrB,IAAI,GAA2B,CAAC;oBAChC,IAAI,CAAC;wBACJ,GAAG,GAAG,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAA2B,CAAC;oBAC5D,CAAC;oBAAC,MAAM,CAAC;wBACR,sEAAsE;wBACtE,SAAS;oBACV,CAAC;oBACD,IAAI,GAAG,IAAI,GAAG,CAAC,OAAO,KAAK,IAAI,EAAE,CAAC;wBACjC,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,EAAE,CAAC;oBACtD,CAAC;gBACF,CAAC;gBACD,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;YAChD,CAAC;YAED,qBAAqB;YACrB,uEAAuE;YACvE,uEAAuE;YACvE,mEAAmE;YACnE,sBAAsB;YACtB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;gBACxC,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAE,CAAC;gBACrB,MAAM,GAAG,GAAG,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;gBAC/B,IAAI,GAAG,IAAI,OAAQ,GAA0B,CAAC,IAAI,KAAK,UAAU,EAAE,CAAC;oBACnE,MAAM,IAAI,KAAK,CACd,2BAA2B,IAAI,sBAAsB,CAAC,yDAAyD,CAC/G,CAAC;gBACH,CAAC;YACF,CAAC;YACD,OAAO,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC;QAChC,CAAC;KACD,CAAC;AACH,CAAC;AAED,8EAA8E;AAC9E,MAAM,UAAU,uBAAuB,CACtC,IAAqC;IAErC,OAAO,gBAAgB,CACtB,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAChB,OAAO,EAAE,CAAC,CAAC,OAAkC;QAC7C,QAAQ,EAAE,CAAC,CAAC,QAAQ;QACpB,EAAE,EAAE,CAAC,CAAC,KAAK;KACX,CAAC,CAAC,CACH,CAAC;AACH,CAAC"}

package/dist/agents/extensions/index.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Brigade extension layer — public surface.
+ *
+ * The plugin engine for agent-level capabilities is Pi 0.73's native extension
+ * system; Brigade adds thin capability registries for product surfaces (channels,
+ * voice, media, integrations). One `defineModule` registers across both. See the
+ * memory note `project_brigade_extensibility_plan`.
+ */
+export { defineModule } from "./types.js";
+export type { BrigadeExtensionContext, BrigadeModule, ChannelAdapter, ChannelCommand, ChannelCommandContext, ChannelStartContext, GatewayCaller, GatewayMethodHandler, HttpRoute, HttpRouteHandler, InboundMessage, Integration, MediaGenProvider, Service, ServiceStartContext, SpeechProvider, TranscriptionProvider, } from "./types.js";
+export { BrigadeExtensionRegistry, type RegistryContextMeta } from "./registry.js";
+export { clearDiscoveryCache, discoverUserModules, type DiscoveredModule } from "./discovery.js";
+export { loadModules, type LoadModulesArgs } from "./loader.js";
+export { BUNDLED_MODULES } from "./modules/index.js";
+//# sourceMappingURL=index.d.ts.map

package/dist/agents/extensions/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/agents/extensions/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAC1C,YAAY,EACX,uBAAuB,EACvB,aAAa,EACb,cAAc,EACd,cAAc,EACd,qBAAqB,EACrB,mBAAmB,EACnB,aAAa,EACb,oBAAoB,EACpB,SAAS,EACT,gBAAgB,EAChB,cAAc,EACd,WAAW,EACX,gBAAgB,EAChB,OAAO,EACP,mBAAmB,EACnB,cAAc,EACd,qBAAqB,GACrB,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,wBAAwB,EAAE,KAAK,mBAAmB,EAAE,MAAM,eAAe,CAAC;AACnF,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAE,KAAK,gBAAgB,EAAE,MAAM,gBAAgB,CAAC;AACjG,OAAO,EAAE,WAAW,EAAE,KAAK,eAAe,EAAE,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC"}

package/dist/agents/extensions/index.js

@@ -0,0 +1,14 @@
+/**
+ * Brigade extension layer — public surface.
+ *
+ * The plugin engine for agent-level capabilities is Pi 0.73's native extension
+ * system; Brigade adds thin capability registries for product surfaces (channels,
+ * voice, media, integrations). One `defineModule` registers across both. See the
+ * memory note `project_brigade_extensibility_plan`.
+ */
+export { defineModule } from "./types.js";
+export { BrigadeExtensionRegistry } from "./registry.js";
+export { clearDiscoveryCache, discoverUserModules } from "./discovery.js";
+export { loadModules } from "./loader.js";
+export { BUNDLED_MODULES } from "./modules/index.js";
+//# sourceMappingURL=index.js.map

package/dist/agents/extensions/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/agents/extensions/index.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAoB1C,OAAO,EAAE,wBAAwB,EAA4B,MAAM,eAAe,CAAC;AACnF,OAAO,EAAE,mBAAmB,EAAE,mBAAmB,EAAyB,MAAM,gBAAgB,CAAC;AACjG,OAAO,EAAE,WAAW,EAAwB,MAAM,aAAa,CAAC;AAChE,OAAO,EAAE,eAAe,EAAE,MAAM,oBAAoB,CAAC"}